cofacts / rumors-api / 25154996420

82%

master: 82%

Build Type

Pull #386

github

Committed by nonumpa

Commit Message

feat(auth): add ALLOWED_CALLBACK_PATTERN for dynamic callback URL matching

Exact-match ALLOWED_CALLBACK_URLS cannot cover Cloud Run PR preview URLs
whose origin changes per PR (e.g. pr-25---cofacts-ai-*-de.a.run.app).

Add optional ALLOWED_CALLBACK_PATTERN env var: a regex (no delimiters)
automatically anchored with ^ and $ so it must match the entire URL.
Existing ALLOWED_CALLBACK_URLS exact-match takes priority; the pattern
is only consulted when no exact match is found.

Operators can set ALLOWED_CALLBACK_PATTERN to cover all PR previews with
a single entry and keep exact URLs in ALLOWED_CALLBACK_URLS for production.

Pull Request Pull Request #386: feat(auth): Custom Authorization Code Flow with RS256 JWT + JWKS

Coverage Stats

884 of 1153 branches covered (76.67%)

Branch coverage included in aggregate %.

111 of 129 new or added lines in 7 files covered. (86.05%)

20 existing lines in 1 file now uncovered.

1721 of 2015 relevant lines covered (85.41%)

17.29 hits per line